msdns_zonename.rb.txt

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' module Msf class...

mswin-dns-meta.txt

!/usr/bin/python Remote exploit for the 0day Windows DNS RPC service vulnerability as described in http://www.securityfocus.com/bid/23470/info. Tested on Windows 2000 SP4. The exploit if successful binds a shell to TCP port 4444 and then connects to it. Cheers to metasploit for the first exploit...

MS Windows DNS DnssrvQuery Remote Stack Overflow Exploit-vulnerability warning-the black bar safety net

/ Copyright c 2 0 0 7 devcode ^^ D E V C O D E ^^ Windows DNS DnssrvQuery Stack Overflow CVE-2 0 0 7-1 7 4 8 Description: A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a...

Microsoft Windows DNS服务器RPC接口远程栈溢出漏洞

Microsoft Windows是微软发布的非常流行的操作系统。 Microsoft Windows DNS服务器的RPC接口在处理畸形请求时存在栈溢出漏洞，远程攻击者可能利用此漏洞获取服务器的管理权限。 如果远程攻击者能够向有漏洞的系统发送特制的RPC报文的话，就可以触发这个溢出，导致以DNS服务的安全环境执行任意指令（默认为Local SYSTEM）。 Microsoft Windows Server 2003 SP2 Microsoft Windows Server 2003 SP1 Microsoft Windows 2000SP4 临时解决方法：...

MS Windows DNS DnssrvQuery Remote Stack Overflow Exploit

No description provided by source. / Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows DNS DnssrvQuery Stack Overflow CVE-2007-1748 Description: A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system. The vulnerabili...

Hidden DCERPC Service Discovery

This module will query the endpoint mapper and make a list of all ncacntcp RPC services. It will then connect to each of these services and use the management API to list all other RPC services accessible on this port. Any RPC service found attached to a TCP port, but not listed in the endpoint...

[Full-disclosure] Microsoft DNS Server Remote Code execution Exploit and analysis

Hi, im sending you the headers of the new exploit code for microsoft DNS servers. You can download the full source code exploit and analysis at: - http://www.514.es/MicrosoftDnsServerExploit.zip or - http://www.48bits.com/exploits/dnsxpl.rar Microsoft DNS Server Remote Code execution Exploit and...

Windows DNS server RPC management interface buffer overflow

Added: 04/16/2007 CVE: CVE-2007-1748 BID: 23470 OSVDB: 34100 Background The Windows DNS service runs an RPC management interface which listens on a dynamically assigned TCP port. Problem A buffer overflow vulnerability in the Windows DNS service allows remote attackers to execute arbitrary comman...

Windows DNS server RPC management interface buffer overflow

Added: 04/16/2007 CVE: CVE-2007-1748 BID: 23470 OSVDB: 34100 Background The Windows DNS service runs an RPC management interface which listens on a dynamically assigned TCP port. Problem A buffer overflow vulnerability in the Windows DNS service allows remote attackers to execute arbitrary comman...

Windows DNS server RPC management interface buffer overflow

Added: 04/16/2007 CVE: CVE-2007-1748 BID: 23470 OSVDB: 34100 Background The Windows DNS service runs an RPC management interface which listens on a dynamically assigned TCP port. Problem A buffer overflow vulnerability in the Windows DNS service allows remote attackers to execute arbitrary comman...

Windows DNS server RPC management interface buffer overflow

Added: 04/16/2007 CVE: CVE-2007-1748 BID: 23470 OSVDB: 34100 Background The Windows DNS service runs an RPC management interface which listens on a dynamically assigned TCP port. Problem A buffer overflow vulnerability in the Windows DNS service allows remote attackers to execute arbitrary comman...

Microsoft Windows - DNS DnssrvQuery Remote Stack Overflow

/ Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows DNS DnssrvQuery Stack Overflow CVE-2007-1748 Description: A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a boundary erro...

Microsoft Windows - DNS DnssrvQuery Remote Stack Overflow

Microsoft Windows - DNS DnssrvQuery Remote Stack Overflow / Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows DNS DnssrvQuery Stack Overflow CVE-2007-1748 Description: A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable...

Microsoft Windows Server 2000 SP4 - DNS RPC Remote Buffer Overflow

Microsoft Windows Server 2000 SP4 - DNS RPC Remote Buffer Overflow !/usr/bin/python Remote exploit for the 0day Windows DNS RPC service vulnerability as described in https://www.securityfocus.com/bid/23470/info. Tested on Windows 2000 SP4. The exploit if successful binds a shell to TCP port 4444...

MS Windows DNS DnssrvQuery Remote Stack Overflow Exploit

Exploit for unknown platform in category remote exploits ======================================================== MS Windows DNS DnssrvQuery Remote Stack Overflow Exploit ======================================================== / Copyright c 2007 devcode ^^ D E V C O D E ^^ Windows DNS DnssrvQuer...

US-CERT Technical Cyber Security Alert TA07-103A -- Microsoft Windows DNS RPC Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-103A Microsoft Windows DNS RPC Buffer Overflow Original release date: April 13, 2007 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows 2003 Server Microsoft Windows 2000...

Immunity Canvas: MS07_029

Name| ms07029 ---|--- CVE| CVE-2007-1748 Exploit Pack| CANVAS Description| Microsoft DNS Server RPC Interface Overflow Notes| References: http://www.microsoft.com/technet/security/Bulletin/ms07-029.mspx CVE Name: CVE-2007-1748 VENDOR: Microsoft Notes: MSADV: MS07-029 Date public: 04/04/2007 CVE...

CVE-2007-1748

Stack-based buffer overflow in the RPC interface in the Domain Name System DNS Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants represented by escape...

Stack overflow

Stack-based buffer overflow in the RPC interface in the Domain Name System DNS Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants represented by escape...

CVE-2007-1748

A stack-based buffer overflow exists in the RPC interface of the Microsoft DNS Server service. The vulnerability is caused by a boundary error in the DnssrvQuery() function when processing a specially crafted RPC request containing a long zone name with escaped octal strings. This can allow remot...